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Method for transferring data between a secure 
con^uter (1)/ e.g. an error-protected stored-program 
cont\ol (1) , and a number of input/output units (2 to 
4) vi^ a bus control unit (6) connected to the secure 
computers (1) and a serial bus system (5) , in which the 
bus contsrol unit (6) cyclically activates the 
input /outpuV units (2 to 4) connected to the bus system 
10 (5) and transfers a multi-bit message (8) to the 
respective actW^-ted input/output unit (e.g. 4), 
characterized irry that 

at least onfe of the input/output units (4) is 
designed as a ^ecurity unit (4) , 
15 - the multi-bit \nessage (8) transferred to the 
security unit (4)\has at least one checkbit, and 
the security unit\(4) interprets the transferred 
multi-bit message csS) as correct only if the 
checkbit alternates within a predefined monitoring 
20 period. 



2. Data transfer method accords{.ng to claim 1, 
characterized in that 

the security unit (4) is de'^^igned as an output 
25 unit for activating an output {\o) , 

has a timer (13) which, at \the end of the 
monitoring period, switches the output (10) to a 
secure condition, \ 
the timer (13) is reset with each csransfer of a 
30 correct multi-bit message (8) 
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3X Data transfer method according to claim 1 or 2 , 
cha]?^9,cterized in that 

tP^ security unit (4) can be activated under two 
different addresses , 

a mulXi-bit message (8) is in each case 
transferred to the security unit (4) under both 
addresses, ^d 

the security \mit (4) interprets the transferred 
multi-bit messages (8) as correct only if the two 
multi-bit messages\(8) match one another. 



4, Data transfer method ac*sx)rding to claim 1, 2 or 3 , 
characterized in that the \multi-bit message (8] 
comprises at least four data bits 





